django-whiteneuron 0.2.44__tar.gz → 0.2.48__tar.gz

{django_whiteneuron-0.2.44 → django_whiteneuron-0.2.48}/PKG-INFO

@@ -1,8 +1,8 @@
 Metadata-Version: 2.4
 Name: django-whiteneuron
-Version: 0.2.44
+Version: 0.2.48
 Summary: A modern Django Admin extension with enhanced UI/UX, dashboard, feedback, file management, rate limiting, IP blacklisting, and advanced admin integrations built on django-unfold.
-Author-email: White Neuron <anhnt@whiteneuron.com>
+Author-email: White Neuron <anhnt@whiteneuron.ai>
 License: MIT License
         
         Copyright (c) 2025 Nguyễn Tú Anh
@@ -25,7 +25,7 @@ License: MIT License
         OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
         SOFTWARE.
         
-Project-URL: homepage, https://github.com/White-Neuron/django-whiteneuron
+Project-URL: homepage, https://whiteneuron.ai
 Project-URL: repository, https://github.com/White-Neuron/django-whiteneuron
 Project-URL: changelog, https://github.com/White-Neuron/django-whiteneuron/releases
 Project-URL: Bug Tracker, https://github.com/White-Neuron/django-whiteneuron/issues
@@ -34,7 +34,7 @@ Keywords: django,plugin,admin,dashboard,whiteneuron
 Classifier: Development Status :: 4 - Beta
 Classifier: Intended Audience :: Developers
 Classifier: Framework :: Django
-Classifier: Framework :: Django :: 5.0
+Classifier: Framework :: Django :: 5.2
 Classifier: Programming Language :: Python :: 3
 Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
@@ -44,7 +44,7 @@ Requires-Python: >=3.11
 Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: django-debug-toolbar>=5.0.1
-Requires-Dist: django>=5.1.6
+Requires-Dist: django>=5.2.12
 Requires-Dist: django-celery-beat>=2.7.0
 Requires-Dist: django-guardian>=2.4.0
 Requires-Dist: django-imagekit>=5.0.0
@@ -58,7 +58,7 @@ Requires-Dist: markdown>=3.7
 Requires-Dist: openai>=1.58.1
 Requires-Dist: openpyxl>=3.1.5
 Requires-Dist: pandas>=2.2.3
-Requires-Dist: pillow>=11.0.0
+Requires-Dist: pillow>=12.1.1
 Requires-Dist: python-dotenv>=1.0.1
 Requires-Dist: redis>=5.2.1
 Requires-Dist: sentry-sdk==2.28.0
@@ -74,6 +74,7 @@ Requires-Dist: django-ckeditor-5>=0.2.18
 Requires-Dist: django-cors-headers>=4.3.0
 Requires-Dist: django-unfold>=0.85.0
 Requires-Dist: djangoql>=0.18.1
+Requires-Dist: cryptography>=46.0.5
 Provides-Extra: dev
 Requires-Dist: pytest; extra == "dev"
 Requires-Dist: black; extra == "dev"
@@ -94,18 +95,59 @@ A modern Django Admin extension focused on UI/UX, dashboard, feedback, file mana
 
 ## Current Version
 
-- 0.2.44
+- 0.2.48
 
 ## Compatibility
 
 - Python >= 3.11
-- Django >= 5.1.6
+- Django >= 5.2.12
 - django-unfold >= 0.85.0
 - Tailwind CSS 4.x + daisyUI 5.x (for the bundled frontend styles)
 
 ## Changelog
 
-### v0.2.44 (2026-04-02) — latest
+### v0.2.48 (2026-04-06) — latest
+**Feature: Change history panel — modal UI, M2M diff, permission gate**
+- **Added**: Change history panel shown on every change-form — floating "History" button (bottom-right, `fixed position`) opens a scrollable modal listing the 50 most recent `Notification` records for the object.
+- **Added**: Each history entry displays: action badge (Create/Update/Delete/Restore), actor avatar + username, timestamp, and an **old → new diff** for every changed field using `changed_data` from the `Notification` model.
+- **Added**: `has_view_history_permission()` on `ModelAdmin` — panel is shown only to superusers or users with `change` permission; read-only staff cannot see history.
+- **Added**: `show_history = True` class attribute on `ModelAdmin` — subclasses can opt out per model by setting `show_history = False`.
+- **Fixed**: DaisyUI v5 `ui-` prefix applied correctly to `ui-modal`, `ui-modal-box`, `ui-modal-backdrop`, `ui-btn` — resolves invisible/broken modal.
+- **Fixed**: Trigger `<button type="button">` — prevents accidental form submission when clicking the History button.
+- **Fixed**: Close button and backdrop use `dialog.close()` via JS — avoids nested `<form method="dialog">` inside the admin form (HTML spec violation that caused the button to escape DOM).
+- **Fixed**: UNFOLD's built-in "Lịch sử" button hidden via `{% block object-tools-items %}{% endblock %}` — eliminates duplicate history link in the toolbar.
+- **Improved**: `import ast` and `reverse` moved to module-level imports in `modeladmin.py`.
+- **Improved**: All panel strings wrapped in `{% trans %}` for full i18n support.
+- **Improved**: `change_list.html` — pagination state (`p=...`) now preserved in `sessionStorage` alongside filters; navigating back from a change form restores the correct page instead of jumping to page 1.
+
+### v0.2.47 (2026-04-05)
+**Feature: M2M change tracking, zero-DB App dashboard, dual-view UI**
+- **Added**: `m2m_changed` signal handler for all concrete `BaseModel` subclasses — `.add()`, `.remove()`, `.set()`, `.clear()` on any ManyToMany field now correctly updates `updated_at`/`updated_by` and sends a notification to superusers with the same `changed_data` format as `save()`.
+- **Added**: App dashboard — two toggle-able view modes: **grid** (2-level category → app cards) and **list** (flat grouped), persisted via `localStorage`.
+- **Removed**: `init_app_db()` DB-write mechanism — App dashboard now reads directly from `settings.UNFOLD['SIDEBAR']` via a new `_parse_sidebar_apps()` helper; zero DB writes on page load.
+- **Fixed**: `app_badge_callback()` counted from stale DB; now counts from `settings.UNFOLD['SIDEBAR']` — badge is always in sync with config.
+- **Fixed**: `has_permission()` in `AppAdmin` now handles callable UNFOLD permissions (lambdas) in addition to dotted-string imports.
+- **Fixed**: Protocol-relative URLs (`//cdn…`) in app icons/thumbnails were incorrectly routed to `{% static %}`; added `|slice:":2" == "//"` check across all render paths.
+- **Fixed**: Mosaic `+N` counter (categories with >4 apps) correctly shows 3 icons + overflow count.
+- **Improved**: Pagination and filter bars hidden on App dashboard via `{% block pagination %}` and `{% block filters %}` override.
+- **Improved**: `pyproject.toml` — `package-data` reduced from 14 lines to 3; removed unused `pyasn1` dep, dead `[tool.uv.workspace]`, empty `[tool.setuptools]`; fixed `Framework :: Django :: 5.2` classifier.
+
+### v0.2.46 (2026-04-04)
+**Fix: Email template — logo URL, company name, and contact details**
+- **Fixed**: Logo URL updated from `api.logo.com` to stable Google-hosted URL.
+- **Fixed**: Company name updated to `White Neuron Co., Ltd` (official name).
+- **Fixed**: Title updated to `Founder & CTO`.
+- **Fixed**: Website URL in signature changed to full `https://whiteneuron.ai`.
+
+### v0.2.45 (2026-04-03)
+**Security: 11 CVE fixes across django, pillow, cryptography, pyasn1**
+- **Security**: `django` lower bound raised from `>=5.1.6` to `>=5.2.12` — patches 7 CVEs including SQL Injection (CVE-2026-1207), DoS ×5, race condition in file-system storage (CVE-2026-25674), and URLField vulnerability (CVE-2026-25673).
+- **Security**: `pillow` lower bound raised from `>=11.0.0` to `>=12.1.1` — patches heap buffer overflow (CVE-2026-25990).
+- **Security**: `cryptography>=46.0.5` added as explicit dependency — patches Improper Input Validation (CVE-2026-26007); previously uncontrolled transitive dependency.
+- **Security**: `pyasn1>=0.6.2` added as explicit dependency — patches CVE-2026-23490; `==0.6.1` was the sole affected version.
+- **Validation**: `safety` scan confirms 0 known vulnerabilities after upgrade (down from 11).
+
+### v0.2.44 (2026-04-02)
 **Fixes & Improvements: Feedback System — Error handling, input limits, i18n lazy evaluation**
 - **Fixed**: `changeform_view` now returns `JsonResponse({"success": True})` after a successful resolve instead of falling through to `super()` with a POST request — prevents a spurious HTTP 403 caused by `has_change_permission = False`.
 - **Fixed**: `note` is read from `request.POST` instead of `request.GET` — prevents HTTP 414 (URI Too Long) when the note is lengthy.
@@ -113,6 +155,7 @@ A modern Django Admin extension focused on UI/UX, dashboard, feedback, file mana
 - **Added**: Two-sided character limits — `maxlength` attribute + live counter on client; server-side validation: `note ≤ 500`, `feedback_message ≤ 2000`.
 - **Added**: `get_short_message()` in `FeedbackDataAdmin.list_display` — truncates to 200 words via Django's `Truncator`.
 - **Fixed**: `search_help_text` moved from `__init__` to a `@property` using `format_lazy` — now re-evaluates per request and responds correctly to language switches instead of being frozen at server startup.
+- **Improved**: `base_badge_callback()` accepts an optional `filter_kwargs` parameter; `feedback_data_badge_callback()` now scopes the badge count to the current user for non-superusers.
 
 ### v0.2.43 (2026-04-01)
 **Feature: Feedback System — DaisyUI modals, anti-spam cooldown, i18n, security hardening**

{django_whiteneuron-0.2.44 → django_whiteneuron-0.2.48}/README.md

@@ -11,18 +11,59 @@ A modern Django Admin extension focused on UI/UX, dashboard, feedback, file mana
 
 ## Current Version
 
-- 0.2.44
+- 0.2.48
 
 ## Compatibility
 
 - Python >= 3.11
-- Django >= 5.1.6
+- Django >= 5.2.12
 - django-unfold >= 0.85.0
 - Tailwind CSS 4.x + daisyUI 5.x (for the bundled frontend styles)
 
 ## Changelog
 
-### v0.2.44 (2026-04-02) — latest
+### v0.2.48 (2026-04-06) — latest
+**Feature: Change history panel — modal UI, M2M diff, permission gate**
+- **Added**: Change history panel shown on every change-form — floating "History" button (bottom-right, `fixed position`) opens a scrollable modal listing the 50 most recent `Notification` records for the object.
+- **Added**: Each history entry displays: action badge (Create/Update/Delete/Restore), actor avatar + username, timestamp, and an **old → new diff** for every changed field using `changed_data` from the `Notification` model.
+- **Added**: `has_view_history_permission()` on `ModelAdmin` — panel is shown only to superusers or users with `change` permission; read-only staff cannot see history.
+- **Added**: `show_history = True` class attribute on `ModelAdmin` — subclasses can opt out per model by setting `show_history = False`.
+- **Fixed**: DaisyUI v5 `ui-` prefix applied correctly to `ui-modal`, `ui-modal-box`, `ui-modal-backdrop`, `ui-btn` — resolves invisible/broken modal.
+- **Fixed**: Trigger `<button type="button">` — prevents accidental form submission when clicking the History button.
+- **Fixed**: Close button and backdrop use `dialog.close()` via JS — avoids nested `<form method="dialog">` inside the admin form (HTML spec violation that caused the button to escape DOM).
+- **Fixed**: UNFOLD's built-in "Lịch sử" button hidden via `{% block object-tools-items %}{% endblock %}` — eliminates duplicate history link in the toolbar.
+- **Improved**: `import ast` and `reverse` moved to module-level imports in `modeladmin.py`.
+- **Improved**: All panel strings wrapped in `{% trans %}` for full i18n support.
+- **Improved**: `change_list.html` — pagination state (`p=...`) now preserved in `sessionStorage` alongside filters; navigating back from a change form restores the correct page instead of jumping to page 1.
+
+### v0.2.47 (2026-04-05)
+**Feature: M2M change tracking, zero-DB App dashboard, dual-view UI**
+- **Added**: `m2m_changed` signal handler for all concrete `BaseModel` subclasses — `.add()`, `.remove()`, `.set()`, `.clear()` on any ManyToMany field now correctly updates `updated_at`/`updated_by` and sends a notification to superusers with the same `changed_data` format as `save()`.
+- **Added**: App dashboard — two toggle-able view modes: **grid** (2-level category → app cards) and **list** (flat grouped), persisted via `localStorage`.
+- **Removed**: `init_app_db()` DB-write mechanism — App dashboard now reads directly from `settings.UNFOLD['SIDEBAR']` via a new `_parse_sidebar_apps()` helper; zero DB writes on page load.
+- **Fixed**: `app_badge_callback()` counted from stale DB; now counts from `settings.UNFOLD['SIDEBAR']` — badge is always in sync with config.
+- **Fixed**: `has_permission()` in `AppAdmin` now handles callable UNFOLD permissions (lambdas) in addition to dotted-string imports.
+- **Fixed**: Protocol-relative URLs (`//cdn…`) in app icons/thumbnails were incorrectly routed to `{% static %}`; added `|slice:":2" == "//"` check across all render paths.
+- **Fixed**: Mosaic `+N` counter (categories with >4 apps) correctly shows 3 icons + overflow count.
+- **Improved**: Pagination and filter bars hidden on App dashboard via `{% block pagination %}` and `{% block filters %}` override.
+- **Improved**: `pyproject.toml` — `package-data` reduced from 14 lines to 3; removed unused `pyasn1` dep, dead `[tool.uv.workspace]`, empty `[tool.setuptools]`; fixed `Framework :: Django :: 5.2` classifier.
+
+### v0.2.46 (2026-04-04)
+**Fix: Email template — logo URL, company name, and contact details**
+- **Fixed**: Logo URL updated from `api.logo.com` to stable Google-hosted URL.
+- **Fixed**: Company name updated to `White Neuron Co., Ltd` (official name).
+- **Fixed**: Title updated to `Founder & CTO`.
+- **Fixed**: Website URL in signature changed to full `https://whiteneuron.ai`.
+
+### v0.2.45 (2026-04-03)
+**Security: 11 CVE fixes across django, pillow, cryptography, pyasn1**
+- **Security**: `django` lower bound raised from `>=5.1.6` to `>=5.2.12` — patches 7 CVEs including SQL Injection (CVE-2026-1207), DoS ×5, race condition in file-system storage (CVE-2026-25674), and URLField vulnerability (CVE-2026-25673).
+- **Security**: `pillow` lower bound raised from `>=11.0.0` to `>=12.1.1` — patches heap buffer overflow (CVE-2026-25990).
+- **Security**: `cryptography>=46.0.5` added as explicit dependency — patches Improper Input Validation (CVE-2026-26007); previously uncontrolled transitive dependency.
+- **Security**: `pyasn1>=0.6.2` added as explicit dependency — patches CVE-2026-23490; `==0.6.1` was the sole affected version.
+- **Validation**: `safety` scan confirms 0 known vulnerabilities after upgrade (down from 11).
+
+### v0.2.44 (2026-04-02)
 **Fixes & Improvements: Feedback System — Error handling, input limits, i18n lazy evaluation**
 - **Fixed**: `changeform_view` now returns `JsonResponse({"success": True})` after a successful resolve instead of falling through to `super()` with a POST request — prevents a spurious HTTP 403 caused by `has_change_permission = False`.
 - **Fixed**: `note` is read from `request.POST` instead of `request.GET` — prevents HTTP 414 (URI Too Long) when the note is lengthy.
@@ -30,6 +71,7 @@ A modern Django Admin extension focused on UI/UX, dashboard, feedback, file mana
 - **Added**: Two-sided character limits — `maxlength` attribute + live counter on client; server-side validation: `note ≤ 500`, `feedback_message ≤ 2000`.
 - **Added**: `get_short_message()` in `FeedbackDataAdmin.list_display` — truncates to 200 words via Django's `Truncator`.
 - **Fixed**: `search_help_text` moved from `__init__` to a `@property` using `format_lazy` — now re-evaluates per request and responds correctly to language switches instead of being frozen at server startup.
+- **Improved**: `base_badge_callback()` accepts an optional `filter_kwargs` parameter; `feedback_data_badge_callback()` now scopes the badge count to the current user for non-superusers.
 
 ### v0.2.43 (2026-04-01)
 **Feature: Feedback System — DaisyUI modals, anti-spam cooldown, i18n, security hardening**

{django_whiteneuron-0.2.44 → django_whiteneuron-0.2.48}/django_whiteneuron.egg-info/PKG-INFO

@@ -1,8 +1,8 @@
 Metadata-Version: 2.4
 Name: django-whiteneuron
-Version: 0.2.44
+Version: 0.2.48
 Summary: A modern Django Admin extension with enhanced UI/UX, dashboard, feedback, file management, rate limiting, IP blacklisting, and advanced admin integrations built on django-unfold.
-Author-email: White Neuron <anhnt@whiteneuron.com>
+Author-email: White Neuron <anhnt@whiteneuron.ai>
 License: MIT License
         
         Copyright (c) 2025 Nguyễn Tú Anh
@@ -25,7 +25,7 @@ License: MIT License
         OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
         SOFTWARE.
         
-Project-URL: homepage, https://github.com/White-Neuron/django-whiteneuron
+Project-URL: homepage, https://whiteneuron.ai
 Project-URL: repository, https://github.com/White-Neuron/django-whiteneuron
 Project-URL: changelog, https://github.com/White-Neuron/django-whiteneuron/releases
 Project-URL: Bug Tracker, https://github.com/White-Neuron/django-whiteneuron/issues
@@ -34,7 +34,7 @@ Keywords: django,plugin,admin,dashboard,whiteneuron
 Classifier: Development Status :: 4 - Beta
 Classifier: Intended Audience :: Developers
 Classifier: Framework :: Django
-Classifier: Framework :: Django :: 5.0
+Classifier: Framework :: Django :: 5.2
 Classifier: Programming Language :: Python :: 3
 Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
@@ -44,7 +44,7 @@ Requires-Python: >=3.11
 Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: django-debug-toolbar>=5.0.1
-Requires-Dist: django>=5.1.6
+Requires-Dist: django>=5.2.12
 Requires-Dist: django-celery-beat>=2.7.0
 Requires-Dist: django-guardian>=2.4.0
 Requires-Dist: django-imagekit>=5.0.0
@@ -58,7 +58,7 @@ Requires-Dist: markdown>=3.7
 Requires-Dist: openai>=1.58.1
 Requires-Dist: openpyxl>=3.1.5
 Requires-Dist: pandas>=2.2.3
-Requires-Dist: pillow>=11.0.0
+Requires-Dist: pillow>=12.1.1
 Requires-Dist: python-dotenv>=1.0.1
 Requires-Dist: redis>=5.2.1
 Requires-Dist: sentry-sdk==2.28.0
@@ -74,6 +74,7 @@ Requires-Dist: django-ckeditor-5>=0.2.18
 Requires-Dist: django-cors-headers>=4.3.0
 Requires-Dist: django-unfold>=0.85.0
 Requires-Dist: djangoql>=0.18.1
+Requires-Dist: cryptography>=46.0.5
 Provides-Extra: dev
 Requires-Dist: pytest; extra == "dev"
 Requires-Dist: black; extra == "dev"
@@ -94,18 +95,59 @@ A modern Django Admin extension focused on UI/UX, dashboard, feedback, file mana
 
 ## Current Version
 
-- 0.2.44
+- 0.2.48
 
 ## Compatibility
 
 - Python >= 3.11
-- Django >= 5.1.6
+- Django >= 5.2.12
 - django-unfold >= 0.85.0
 - Tailwind CSS 4.x + daisyUI 5.x (for the bundled frontend styles)
 
 ## Changelog
 
-### v0.2.44 (2026-04-02) — latest
+### v0.2.48 (2026-04-06) — latest
+**Feature: Change history panel — modal UI, M2M diff, permission gate**
+- **Added**: Change history panel shown on every change-form — floating "History" button (bottom-right, `fixed position`) opens a scrollable modal listing the 50 most recent `Notification` records for the object.
+- **Added**: Each history entry displays: action badge (Create/Update/Delete/Restore), actor avatar + username, timestamp, and an **old → new diff** for every changed field using `changed_data` from the `Notification` model.
+- **Added**: `has_view_history_permission()` on `ModelAdmin` — panel is shown only to superusers or users with `change` permission; read-only staff cannot see history.
+- **Added**: `show_history = True` class attribute on `ModelAdmin` — subclasses can opt out per model by setting `show_history = False`.
+- **Fixed**: DaisyUI v5 `ui-` prefix applied correctly to `ui-modal`, `ui-modal-box`, `ui-modal-backdrop`, `ui-btn` — resolves invisible/broken modal.
+- **Fixed**: Trigger `<button type="button">` — prevents accidental form submission when clicking the History button.
+- **Fixed**: Close button and backdrop use `dialog.close()` via JS — avoids nested `<form method="dialog">` inside the admin form (HTML spec violation that caused the button to escape DOM).
+- **Fixed**: UNFOLD's built-in "Lịch sử" button hidden via `{% block object-tools-items %}{% endblock %}` — eliminates duplicate history link in the toolbar.
+- **Improved**: `import ast` and `reverse` moved to module-level imports in `modeladmin.py`.
+- **Improved**: All panel strings wrapped in `{% trans %}` for full i18n support.
+- **Improved**: `change_list.html` — pagination state (`p=...`) now preserved in `sessionStorage` alongside filters; navigating back from a change form restores the correct page instead of jumping to page 1.
+
+### v0.2.47 (2026-04-05)
+**Feature: M2M change tracking, zero-DB App dashboard, dual-view UI**
+- **Added**: `m2m_changed` signal handler for all concrete `BaseModel` subclasses — `.add()`, `.remove()`, `.set()`, `.clear()` on any ManyToMany field now correctly updates `updated_at`/`updated_by` and sends a notification to superusers with the same `changed_data` format as `save()`.
+- **Added**: App dashboard — two toggle-able view modes: **grid** (2-level category → app cards) and **list** (flat grouped), persisted via `localStorage`.
+- **Removed**: `init_app_db()` DB-write mechanism — App dashboard now reads directly from `settings.UNFOLD['SIDEBAR']` via a new `_parse_sidebar_apps()` helper; zero DB writes on page load.
+- **Fixed**: `app_badge_callback()` counted from stale DB; now counts from `settings.UNFOLD['SIDEBAR']` — badge is always in sync with config.
+- **Fixed**: `has_permission()` in `AppAdmin` now handles callable UNFOLD permissions (lambdas) in addition to dotted-string imports.
+- **Fixed**: Protocol-relative URLs (`//cdn…`) in app icons/thumbnails were incorrectly routed to `{% static %}`; added `|slice:":2" == "//"` check across all render paths.
+- **Fixed**: Mosaic `+N` counter (categories with >4 apps) correctly shows 3 icons + overflow count.
+- **Improved**: Pagination and filter bars hidden on App dashboard via `{% block pagination %}` and `{% block filters %}` override.
+- **Improved**: `pyproject.toml` — `package-data` reduced from 14 lines to 3; removed unused `pyasn1` dep, dead `[tool.uv.workspace]`, empty `[tool.setuptools]`; fixed `Framework :: Django :: 5.2` classifier.
+
+### v0.2.46 (2026-04-04)
+**Fix: Email template — logo URL, company name, and contact details**
+- **Fixed**: Logo URL updated from `api.logo.com` to stable Google-hosted URL.
+- **Fixed**: Company name updated to `White Neuron Co., Ltd` (official name).
+- **Fixed**: Title updated to `Founder & CTO`.
+- **Fixed**: Website URL in signature changed to full `https://whiteneuron.ai`.
+
+### v0.2.45 (2026-04-03)
+**Security: 11 CVE fixes across django, pillow, cryptography, pyasn1**
+- **Security**: `django` lower bound raised from `>=5.1.6` to `>=5.2.12` — patches 7 CVEs including SQL Injection (CVE-2026-1207), DoS ×5, race condition in file-system storage (CVE-2026-25674), and URLField vulnerability (CVE-2026-25673).
+- **Security**: `pillow` lower bound raised from `>=11.0.0` to `>=12.1.1` — patches heap buffer overflow (CVE-2026-25990).
+- **Security**: `cryptography>=46.0.5` added as explicit dependency — patches Improper Input Validation (CVE-2026-26007); previously uncontrolled transitive dependency.
+- **Security**: `pyasn1>=0.6.2` added as explicit dependency — patches CVE-2026-23490; `==0.6.1` was the sole affected version.
+- **Validation**: `safety` scan confirms 0 known vulnerabilities after upgrade (down from 11).
+
+### v0.2.44 (2026-04-02)
 **Fixes & Improvements: Feedback System — Error handling, input limits, i18n lazy evaluation**
 - **Fixed**: `changeform_view` now returns `JsonResponse({"success": True})` after a successful resolve instead of falling through to `super()` with a POST request — prevents a spurious HTTP 403 caused by `has_change_permission = False`.
 - **Fixed**: `note` is read from `request.POST` instead of `request.GET` — prevents HTTP 414 (URI Too Long) when the note is lengthy.
@@ -113,6 +155,7 @@ A modern Django Admin extension focused on UI/UX, dashboard, feedback, file mana
 - **Added**: Two-sided character limits — `maxlength` attribute + live counter on client; server-side validation: `note ≤ 500`, `feedback_message ≤ 2000`.
 - **Added**: `get_short_message()` in `FeedbackDataAdmin.list_display` — truncates to 200 words via Django's `Truncator`.
 - **Fixed**: `search_help_text` moved from `__init__` to a `@property` using `format_lazy` — now re-evaluates per request and responds correctly to language switches instead of being frozen at server startup.
+- **Improved**: `base_badge_callback()` accepts an optional `filter_kwargs` parameter; `feedback_data_badge_callback()` now scopes the badge count to the current user for non-superusers.
 
 ### v0.2.43 (2026-04-01)
 **Feature: Feedback System — DaisyUI modals, anti-spam cooldown, i18n, security hardening**

{django_whiteneuron-0.2.44 → django_whiteneuron-0.2.48}/django_whiteneuron.egg-info/SOURCES.txt

@@ -164,6 +164,8 @@ whiteneuron/templates/admin/login.html
 whiteneuron/templates/admin/login_after.html
 whiteneuron/templates/admin/search_form.html
 whiteneuron/templates/admin/submit_line.html
+whiteneuron/templates/admin/wn_change_form.html
+whiteneuron/templates/admin/wn_history_panel.html
 whiteneuron/templates/admin/auth/user/add_form.html
 whiteneuron/templates/admin/base/app_change_list.html
 whiteneuron/templates/admin/base/image_change_form.html

{django_whiteneuron-0.2.44 → django_whiteneuron-0.2.48}/django_whiteneuron.egg-info/requires.txt

@@ -1,5 +1,5 @@
 django-debug-toolbar>=5.0.1
-django>=5.1.6
+django>=5.2.12
 django-celery-beat>=2.7.0
 django-guardian>=2.4.0
 django-imagekit>=5.0.0
@@ -13,7 +13,7 @@ markdown>=3.7
 openai>=1.58.1
 openpyxl>=3.1.5
 pandas>=2.2.3
-pillow>=11.0.0
+pillow>=12.1.1
 python-dotenv>=1.0.1
 redis>=5.2.1
 sentry-sdk==2.28.0
@@ -29,6 +29,7 @@ django-ckeditor-5>=0.2.18
 django-cors-headers>=4.3.0
 django-unfold>=0.85.0
 djangoql>=0.18.1
+cryptography>=46.0.5
 
 [dev]
 pytest

{django_whiteneuron-0.2.44 → django_whiteneuron-0.2.48}/pyproject.toml

@@ -1,16 +1,16 @@
 [project]
 name = "django-whiteneuron"
-version = "0.2.44"
+version = "0.2.48"
 description = "A modern Django Admin extension with enhanced UI/UX, dashboard, feedback, file management, rate limiting, IP blacklisting, and advanced admin integrations built on django-unfold."
 authors = [
-    {name = "White Neuron", email = "anhnt@whiteneuron.com"}
+    {name = "White Neuron", email = "anhnt@whiteneuron.ai"}
 ]
 license = {file = "LICENSE"}
 readme = "README.md"
 keywords = ["django", "plugin", "admin", "dashboard", "whiteneuron"]
 dependencies = [
     "django-debug-toolbar>=5.0.1",
-    "django>=5.1.6",
+    "django>=5.2.12",
     "django-celery-beat>=2.7.0",
     "django-guardian>=2.4.0",
     "django-imagekit>=5.0.0",
@@ -24,7 +24,7 @@ dependencies = [
     "openai>=1.58.1",
     "openpyxl>=3.1.5",
     "pandas>=2.2.3",
-    "pillow>=11.0.0",
+    "pillow>=12.1.1",
     "python-dotenv>=1.0.1",
     "redis>=5.2.1",
     "sentry-sdk==2.28.0",
@@ -40,6 +40,7 @@ dependencies = [
     'django-cors-headers>=4.3.0',
     "django-unfold>=0.85.0",
     "djangoql>=0.18.1",
+    "cryptography>=46.0.5",
 ]
 requires-python = ">=3.11"
 
@@ -47,7 +48,7 @@ classifiers = [
     "Development Status :: 4 - Beta",
     "Intended Audience :: Developers",
     "Framework :: Django",
-    "Framework :: Django :: 5.0",
+    "Framework :: Django :: 5.2",
     "Programming Language :: Python :: 3",
     "Programming Language :: Python :: 3.11",
     "Programming Language :: Python :: 3.12",
@@ -56,37 +57,23 @@ classifiers = [
 ]
 
 [project.urls]
-homepage = "https://github.com/White-Neuron/django-whiteneuron"
+homepage = "https://whiteneuron.ai"
 repository = "https://github.com/White-Neuron/django-whiteneuron"
 changelog = "https://github.com/White-Neuron/django-whiteneuron/releases"
 "Bug Tracker" = "https://github.com/White-Neuron/django-whiteneuron/issues"
 "PyPI" = "https://pypi.org/project/django-whiteneuron/"
 
-[tool.setuptools]
 [tool.setuptools.packages.find]
 where = ["."]
 include = ["whiteneuron*"]
 
 [tool.setuptools.package-data]
 "whiteneuron" = [
-    "base/templates/**/*",
-    "base/static/**/*",
-    "feedbacks/templates/**/*",
-    "feedbacks/static/**/*",
     "templates/**/*",
-    "templates/**/**/*",
-    "templates/**/**/**/*",
     "static/**/*",
-    "static/**/**/*",
-    "static/**/**/**/*",
-    'locale/**/*',
-    'locale/**/**/*',
-    'locale/**/**/**/*',
+    "locale/**/*",
 ]
 
-[tool.uv.workspace]
-members = ["demo"]
-
 [project.optional-dependencies]
 dev = ["pytest", "black", "flake8", "pre-commit"]